CveMateVulnerability intelligence

Gnu vulnerabilities, page 5

1,240 vulnerabilities

Known vulnerabilities in Gnu products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 130 products.

CVE-2018-12697canonicalubuntu_linux+48y ago23-06-2018 22:00

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.CVE-2018-12886chainguardgcc-6+97y ago22-05-2019 18:42

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.CVE-2018-12934debianbinutils+38y ago28-06-2018 14:00

remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.CVE-2018-8945alpinebinutils+68y ago22-03-2018 21:00

The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.CVE-2003-1232gnuemacs21y ago26-09-2005 04:00

Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable.CVE-2003-0255gnuprivacy_guard23y ago07-05-2003 04:00

The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.CVE-2003-0991gnumailman+122y ago01-09-2004 04:00

Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.CVE-2003-0849gnucfengine23y ago09-10-2003 04:00

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.CVE-2003-0028crayunicos+1523y ago21-03-2003 05:00

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.CVE-2003-0858gnuzebra+322y ago18-11-2003 05:00

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.CVE-2003-0826debianlsh-utils+123y ago23-09-2003 04:00

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.CVE-2003-0367debiangzip+223y ago10-06-2003 04:00

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2003-0038gnumailman+123y ago29-01-2003 05:00

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.CVE-2003-0854debiancoreutils+223y ago25-10-2003 04:00

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2003-0992gnumailman22y ago15-01-2004 05:00

Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.CVE-2003-0972debianscreen+122y ago02-12-2003 05:00

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.CVE-2003-0971debiangnupg+322y ago02-12-2003 05:00

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.CVE-2003-0853debiancoreutils+223y ago25-10-2003 04:00

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2003-0859gnuglibc+522y ago18-11-2003 05:00

The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.CVE-2003-0795gnuzebra+222y ago18-11-2003 05:00

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.